IT28835: "CATALOG USER ODBC DATA SOURCE" IN LDAP/AD ENVIRONMENT MIGHT CLEAR DB2CLI.INI IF USER HAS NO WRITE ACCESS TO THE USER OBJECT

APAR status

• Closed as program error.

Error description

• In Db2 environments with LDAP/Active Directory enabled running:
  
  catalog user odbc data source <data_soruce>
  
  will not update db2cli.ini if given user has no write access to
  the user object in Active Directory.
  If an entry for given data source already exist in db2cli.ini,
  running the command will clear it.
  

Local fix

• Make sure that user has access to create objects under the User
  object. Details can be found in "Security considerations for
  Active Directory" chapter of the documentation.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * all                                                          *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See Error Description                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Upgrade to Db2 11.1.4.6 or higher                            *
  ****************************************************************
  

Problem conclusion

• Upgrade to Db2 11.1.4.6 or higher
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DB2 FOR LUW

• Fixed component ID

  DB2FORLUW

Applicable component levels